CVE-2023-2523

CVE-2023-2523 (Weaver E-Office 9.5) A remote unrestricted file upload vulnerability exists in Weaver E-Office 9.5 via the endpoint App/Ajax/ajax.php?action=mobile_upload_save, where the upload_quwan parameter enables uploading arbitrary files. The issue is exploitable remotely and has been public...

CVE-2023-29827

CVE-2023-29827 affects ejs 3.1.9; vulnerability is a server-side template injection when the closeDelimiter parameter is controllable. Vendor disputes the exploitability since render may not be used with untrusted input. Impact is described as high (CVSS v3.1 base 9.8) with network access, no use...

CVE-2023-21492

CVE-2023-21492 is a Samsung Mobile devices vulnerability where kernel pointers are printed to the log file, enabling a privileged, local attacker to bypass ASLR. Affected software relates to Samsung Mobile devices with the SMR May-2023 Release 1 context. The root cause is the insertion of sensiti...

CVE-2023-32007

CVE-2023-32007 describes a command injection in the Apache Spark UI when ACLs are enabled via spark.acls.enable. A path in HttpSecurityFilter could allow impersonation by supplying an arbitrary username, enabling a permission check to build and execute a Unix shell command as the Spark process us...

CVE-2023-29489

CVE-2023-29489 affects cPanel before 11.109.9999.116, with XSS on the cpsrvd error page triggered by an invalid webcall ID (SEC-669). Impact is browser-execution of malicious scripts, as described, with the vulnerability graded as MEDIUM (CVSS v3.1). Affected fixed versions are 11.109.9999.116, 1...

CVE-2023-28770

CVE-2023-28770 affects Zyxel DX5401-B0 firmware prior to V5.17(ABYO.1)C0. The issue arises from sensitive information exposure via CGI Export_Log and the zcmd binary, allowing a remote unauthenticated attacker to read system files and retrieve the supervisor password from an encrypted file. Publi...

CVE-2023-24796

CVE-2023-24796 affects the Vinga WR-AC1200 router (versions 81.102.1.4370 and earlier). A vulnerability in the password parameter exposed via the /goform/sysTools and /adm/systools.asp endpoints allows a remote attacker to run arbitrary code. Several connected sources confirm the affected product...

CVE-2023-29552

CVE-2023-29552 describes a DoS vulnerability in the Service Location Protocol (SLP) where an unauthenticated remote attacker can register arbitrary services, causing SLP server to respond with spoofed traffic and enabling large amplification (reported up to ~2,200x). Documented impacts include po...

CVE-2023-28771

CVE-2023-28771 is an OS command injection in Zyxel devices (ZyWALL/USG, VPN, USG FLEX, ATP) due to improper error message handling. A unauthenticated attacker can remotely execute commands by sending crafted UDP/IKE-related packets to affected firmware: Zyxel ATP, USG FLEX, VPN, and ZyWALL/USG li...

CVE-2023-1020

The CVE-2023-1020 entry concerns the WordPress plugin Steveas WP Live Chat Shoutbox, affected in versions up to 1.4.2. The root cause is a SQL injection vulnerability caused by unsanitized/uncleaned parameters in an AJAX action accessible to unauthenticated users, enabling arbitrary SQL execution...

CVE-2023-27524

CVE-2023-27524 affects Apache Superset up to 2.0.1 where an insecure default SECRET_KEY allows authentication bypass and unauthorized access. Multiple connected sources show public exploits and PoCs (e.g., GitHub exploits for session cookie forging and potential RCE/auth bypass) illustrating prac...

CVE-2023-31059

Repetier Server ( Version 1.4.10 and earlier ) is affected by a directory traversal vulnerability ( CVE-2023-31059 ) that allows reading files containing credentials via a ..%5c traversal vector, as demonstrated by connectionLost.php. Affected component is the server software itself; root cause i...

CVE-2023-27350

CVE-2023-27350 affects PaperCut MF/NG and allows unauthenticated remote code execution by exploiting improper access control in SetupCompleted, enabling code execution as SYSTEM. Public PoCs and exploits exist (e.g., GitHub and Exploit-DB entries) targeting PaperCut MF/NG 8.0+ and various 22.x bu...

CVE-2023-27351

PaperCut NG 22.0.5 (Build 63914) contains an authentication bypass vulnerability in the SecurityRequestFilter class due to improper implementation of the authentication algorithm. This allows remote attackers to bypass authentication without user interaction. Evidence across multiple sources (ZDI...

CVE-2023-2136

CVE-2023-2136 refers to an integer overflow in Skia used by Google Chrome before 112.0.5615.137. A remote attacker who already compromised the renderer could craft a page to potentially escape the sandbox. The issue affects Chrome/Chromium's Skia path and was fixed in Chrome 112.0.5615.137 and ne...

CVE-2023-22621

CVE-2023-22621 affects Strapi up to version 4.5.5. An authenticated attacker with admin access can exploit Server-Side Template Injection (SSTI) in email templates to achieve arbitrary code execution on the server. Multiple connected sources confirm the vulnerability vector and potential RCE via ...

CVE-2023-21931

CVE-2023-21931 is a pre-auth, unauthenticated remote code execution/vulnerability in Oracle WebLogic Server (Fusion Middleware) affecting Core, with affected versions 12.2.1.3.0, 12.2.1.4.0, and 14.1.1.0.0. The public sources describe network access via T3 (and IIOP in related discussions) enabli...

CVE-2023-21932

CVE-2023-21932 affects Oracle Hospitality OPERA 5 Property Services, component OXI, with the affected release listed as 5.6. The Red Hat and other connected documents describe an unauthenticated/privilege-protected vulnerability in the FileReceiver/HTTP interface that allows high-privilege networ...

CVE-2022-38840

The Güralp MAN-EAM-0003 3.2.4 system is affected by an XML External Entity (XXE) vulnerability in the cgi-bin/xmlstatus.cgi endpoint. An XML file upload can trigger local file disclosure, enabling an unauthenticated attacker to read files on the seismic monitoring system. A fix is to upgrade to a...

CVE-2023-2033

CVE-2023-2033: A type confusion in Google's V8 engine used by Chromium-based browsers allowed remote heap corruption via crafted HTML. The vulnerability affected Google Chrome/Chromium up to version 112.0.5615.121 and was fixed in the 112.0.5615.121 release (M112 Stable Update). Chrome’s advisory...